Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa
File:                     cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa (raw, json)
Hash identifier:          LV9e+X5yI3QOYFj/81OdDG+HRi+dJ5D6oWiiK6LnuNw=
Subject key identifier:   6D:12:8C:43:68:24:C2:CD:80:C7:1F:ED:1B:EC:B8:AB:9A:16:C4:7E
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F49748F5131817EF4DC2262C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     207266
IP address blocks:        199.249.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:8f:51:31:81:7e:f4:dc:22:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b584fc8b-692c-4baa-9b79-1f5d6667e8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6d:36:18:b6:7b:b9:b9:d1:9f:5b:80:18:56:
                    8b:d8:93:2a:81:07:ce:61:a6:0d:f1:11:85:43:e6:
                    c3:c6:24:0b:e2:29:cf:67:1c:8d:af:82:0d:53:59:
                    08:97:c1:e2:be:1c:c6:47:6e:ff:ad:f4:9b:93:e1:
                    82:24:a3:bb:3c:5f:f2:f5:1d:aa:5b:e4:64:01:6f:
                    c0:a6:05:ea:94:2c:b6:07:7a:f0:f6:92:57:f1:66:
                    8b:0c:a9:b8:68:40:89:ca:2d:8c:ac:25:dc:95:3b:
                    48:4d:68:b8:34:06:22:d1:16:0d:9c:28:fa:96:49:
                    f7:ab:d4:83:a7:7f:06:c9:02:69:25:e9:d4:f9:77:
                    00:4b:79:cd:9e:70:b2:a1:c0:bb:b9:61:1e:7f:29:
                    bf:3a:8f:fb:f7:11:74:87:57:46:99:4d:13:98:5c:
                    07:40:f3:36:81:45:43:b3:98:17:86:1d:f9:4a:7f:
                    13:7c:8a:16:53:6a:74:6c:27:cb:7c:45:b9:8f:64:
                    90:3d:42:d7:aa:3b:83:23:88:ad:d6:01:1f:5b:25:
                    57:ef:ba:08:ce:4f:b5:4e:ab:48:56:f9:89:15:2f:
                    1d:b1:1a:c4:53:f3:11:96:43:63:ee:a0:a5:f4:0f:
                    66:44:e6:f2:6a:a7:d6:b9:79:af:a9:64:c7:91:73:
                    a1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:12:8C:43:68:24:C2:CD:80:C7:1F:ED:1B:EC:B8:AB:9A:16:C4:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:98:4f:60:cb:c7:f2:f7:ae:fd:a0:93:e3:3e:70:18:01:f5:
         47:e3:5f:7a:3c:5b:07:71:49:d6:25:84:d8:56:5b:7e:a0:a5:
         1f:9e:37:dc:45:5e:33:49:4b:5e:d9:e0:13:a4:9a:7f:01:57:
         66:2e:78:31:6b:5c:fd:9f:1a:7b:51:5a:a0:41:ca:18:99:a6:
         3b:10:e3:c5:97:16:eb:7b:c6:ae:8a:0a:25:2c:c3:46:c1:ed:
         6c:d8:39:95:ba:4f:40:45:e1:93:e2:bb:e1:45:9f:60:f4:f5:
         48:7f:3b:64:04:39:f2:24:2c:cd:a6:17:83:cb:e5:c5:bb:71:
         15:b5:fd:b2:1e:34:4c:5d:f7:ce:04:2c:b9:6a:dd:30:60:d0:
         e4:48:a0:ec:f9:24:ee:65:20:e6:6b:c0:c4:fc:e1:bb:d3:62:
         98:6d:61:d8:13:3d:28:56:e0:84:fa:89:9f:fe:61:e1:82:08:
         b8:93:ae:f3:a7:74:1c:fd:c2:32:37:06:c4:a0:22:19:de:90:
         04:45:9a:73:bb:4b:dd:ff:d6:44:0d:28:9f:24:d9:94:59:4f:
         87:a6:9c:ba:e8:a4:21:7f:d7:3b:bb:65:f4:46:98:82:ce:eb:
         4c:b1:98:7b:54:fe:6c:fa:c7:51:e4:3f:9a:da:b8:14:84:f9:
         43:f9:01:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdI9RMYF+9NwiYsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjU4NGZjOGItNjkyYy00YmFhLTliNzktMWY1ZDY2NjdlOGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn202GLZ7ubnRn1uAGFaL2JMqgQfOYaYN8RGF
Q+bDxiQL4inPZxyNr4INU1kIl8HivhzGR27/rfSbk+GCJKO7PF/y9R2qW+RkAW/A
pgXqlCy2B3rw9pJX8WaLDKm4aECJyi2MrCXclTtITWi4NAYi0RYNnCj6lkn3q9SD
p38GyQJpJenU+XcAS3nNnnCyocC7uWEefym/Oo/79xF0h1dGmU0TmFwHQPM2gUVD
s5gXhh35Sn8TfIoWU2p0bCfLfEW5j2SQPULXqjuDI4it1gEfWyVX77oIzk+1TqtI
VvmJFS8dsRrEU/MRlkNj7qCl9A9mRObyaqfWuXmvqWTHkXOhYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG0SjENoJMLNgMcf7RvsuKuaFsR+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2I0OTM5NTMtN2Q4Mi0z
YzY4LWIzZDEtZmNmYjI0YmM3NDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWYT2DLx/L3rv2gk+M+cBgB9UfjX3o8WwdxSdYlhNhWW36gpR+eN9xF
XjNJS17Z4BOkmn8BV2YueDFrXP2fGntRWqBByhiZpjsQ48WXFut7xq6KCiUsw0bB
7WzYOZW6T0BF4ZPiu+FFn2D09Uh/O2QEOfIkLM2mF4PL5cW7cRW1/bIeNExd984E
LLlq3TBg0ORIoOz5JO5lIOZrwMT84bvTYphtYdgTPShW4IT6iZ/+YeGCCLiTrvOn
dBz9wjI3BsSgIhnekARFmnO7S93/1kQNKJ8k2ZRZT4emnLropCF/1zu7ZfRGmILO
60yxmHtU/mz6x1HkP5rauBSE+UP5ATw=
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:24:51 2026 by rpki-client